Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa
File:                     470E849A389E11EF83D66176C4F9AE02.roa (raw, json)
Hash identifier:          kI6ahe1tVmEHXboGkIpfP4BuL6IUV+thBDNq6dBrUok=
Subject key identifier:   EB:43:1C:E9:47:3B:86:34:A1:78:71:3B:71:81:A6:64:3B:8C:33:80
Certificate issuer:       /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691
Certificate serial:       018E
Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa
Signing time:             Wed 29 Jul 2026 05:55:58 +0000
ROA not before:           Wed 29 Jul 2026 05:55:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     153048
IP address blocks:        2001:df4:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl
                          rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691
        Validity
            Not Before: Jul 29 05:55:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6995ee-e14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:0a:d0:8e:cd:a0:42:0e:3d:07:6f:4f:2f:
                    c4:be:fc:14:9c:4b:32:9f:61:e6:a7:c1:25:fb:e4:
                    3b:f9:b1:57:cf:8b:d1:52:17:81:04:dd:49:a5:20:
                    b5:f5:8f:13:79:03:c9:ea:9d:f9:f5:a5:e2:4f:93:
                    cf:19:b2:bd:fa:6c:46:70:b3:47:c1:cf:c4:4e:ca:
                    0e:07:cf:b6:d1:6d:9f:1f:9e:61:bd:61:56:16:2c:
                    13:64:9a:58:61:5f:c6:94:db:b0:d8:e1:d9:f7:73:
                    6b:d3:b0:bd:41:09:60:18:6e:2a:40:72:45:cf:72:
                    e0:44:c1:59:b0:38:2a:29:07:aa:68:ef:0a:9c:77:
                    11:11:04:d2:4f:1d:e9:9f:9a:5f:f4:3c:df:c7:02:
                    93:8c:36:9b:b7:7f:ee:e7:ed:52:92:cc:b1:c5:6a:
                    a3:f2:84:6c:23:e1:7b:c9:be:aa:3f:3b:cb:97:cf:
                    0c:ab:e9:8f:8a:a5:7d:02:64:22:b3:2f:87:df:f0:
                    57:8c:93:d7:61:b8:19:a3:e7:4d:b2:0d:ae:05:ee:
                    fd:9a:ff:ab:cb:7c:71:f8:57:b9:cd:3b:74:e9:45:
                    16:00:9c:bb:0b:1e:c9:b9:c7:60:60:03:f0:11:8e:
                    ca:52:68:43:ba:a2:9b:f3:16:e5:6c:cd:5c:4a:8f:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:43:1C:E9:47:3B:86:34:A1:78:71:3B:71:81:A6:64:3B:8C:33:80
            X509v3 Authority Key Identifier:
                keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:73:ad:b6:b5:0e:3e:4f:74:fa:b3:a3:2c:b6:eb:0f:0b:68:
         d8:aa:d9:07:52:35:5c:f5:2c:8a:83:be:01:b5:27:b0:4c:85:
         30:28:30:e6:6e:73:72:b9:b7:65:e7:91:1a:ef:c2:06:29:a8:
         67:59:d0:c3:32:cf:af:00:b1:3b:84:48:68:9e:14:66:cf:ad:
         bf:38:ad:a2:e1:31:9e:76:a9:08:41:52:c0:18:e9:db:f1:70:
         07:36:d3:52:58:69:60:e9:cb:e6:3d:f6:2c:eb:c0:7d:3e:6e:
         cb:b1:88:60:05:e3:c1:ba:76:40:a2:06:8f:e4:87:78:12:67:
         9f:8e:57:0c:7a:cf:7c:2e:ce:2e:16:6e:93:ce:50:0a:85:24:
         1a:a1:da:89:39:1e:0f:88:3e:36:15:94:57:73:95:26:80:fd:
         e1:01:6b:59:2f:c2:4b:9d:b2:c8:25:1d:cf:f0:40:86:55:bb:
         69:c3:ca:53:fa:0e:fd:20:81:0d:17:b4:72:95:ea:62:f0:a7:
         b0:bb:57:c0:16:5f:20:f0:80:6d:7e:f5:c8:03:13:54:3b:68:
         fe:56:3c:4c:5e:0a:3a:41:e6:d5:f0:87:7a:40:f3:51:96:c8:
         b0:d1:77:a0:85:d8:36:39:dd:70:1b:96:4b:61:64:e3:9e:79:
         e7:e9:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:08:09 2026 by rpki-client